Static task
static1
Behavioral task
behavioral1
Sample
290218ac27436028d16404eaf67acb44_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
290218ac27436028d16404eaf67acb44_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
290218ac27436028d16404eaf67acb44_JaffaCakes118
-
Size
9KB
-
MD5
290218ac27436028d16404eaf67acb44
-
SHA1
2baac2518ffe99fbee66a67ba0c96523f53296c6
-
SHA256
75fe1dbad9cb3d5ebe2736a94495ceb1a4b8e9b1c57c4c17eba1d9ea8873bfd3
-
SHA512
f7ce77a01f3312045d266c3cacacdeec00634824325899e7f07de24477218c08bcff71aafc87cb825e69dd980e369c468e43daa708fc0677fd7949693aa70273
-
SSDEEP
192:RNqhl+CkgmG7dPVtLA78hBND+AndecL7Fp:Pqj+CkgmCN8K3decfFp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 290218ac27436028d16404eaf67acb44_JaffaCakes118
Files
-
290218ac27436028d16404eaf67acb44_JaffaCakes118.exe windows:4 windows x86 arch:x86
ed752be7b437aead73b91250ffe08feb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
ExitProcess
user32
wsprintfA
Sections
.text Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE